Cisco Systems OL-6217-01 manual CiscoSecure ACS NAS Setup

Page 15

Cisco Structured Wireless-Aware Network (SWAN) Implementation Guide

Implementing the Cisco SWAN Framework

•Define each WDS-host as a network access server (NAS)

•Define credentials to be used by infrastructure access points for authentication

•To define each WDS-host as a NAS on the CiscoSecure ACS, follow these steps:

Step 1 Log into the CiscoSecure ACS server.

Step 2 Select Network Configuration from the menu on the left-hand side (see Figure 5).

Step 3 Under the AAA Clients section, select Add Entry (see Figure 5).

Figure 5 CiscoSecure ACS NAS Setup

Step 4 Complete the form by entering a) the WDS-host device host name in the AAA Client Hostname field, b) the WDS-host IP address in the AAA Client Address field, and (c) a RADIUS shared secret in the Key field.

Note The key value is entered later on each WDS-host device.

Step 5 Select RADIUS (Cisco Aironet) in the Authenticate Using selection menu.

Step 6 Select the desired RADIUS logging options.

Step 7 Click Submit or Submit + Restart (see Figure 6).

Cisco Structured Wireless-Aware Network (SWAN) Implementation Guide

	OL-6217-01	15

Image 15

Contents Corporate Headquarters Cisco Aironet 1400 Series Wireless Bridge Deployment Guide N T E N T S Contents Book Title Xxxxx-xx Audience Acroymns and Terms Cisco Swan Framework Overview Cisco Swan Layers Cisco Swan Logical View Shows the access point-based WDS solution WDS Wlccp Cisco Swan Framework ComponentsHardware Components Software ComponentsImplementing the Cisco Swan Framework Common Tasks CiscoSecure ACS NAS Setup Adding Username and Password Credentials CiscoSecure ACS User Setup AAA-apconfig-radsrvuser username password password AAA-apconfig#radius-server localCiscoWorks Wlse Snmp Community Entry Screen CiscoWorks Wlse Telnet/SSH Credentials Entry Configuring the WDS Access Point Access Point-Based WDS Solution ConfigurationWds-apconfig#username username password password Wds-apconfig#hostname hostnameConfiguring the Infrastructure Access Point Wds-apconfig#wlccp wds priority priority numberWds-apconfig#wlccp wnm ip address wlse ip address Infra-apconfig-line#access-class access-list number Managing the Access Points with the CiscoWorks WlseInfra-apconfig#hostname hostname Infra-apconfig#username username password passwordWds-ap#show wlccp wds ap Switch-Based WDS Solution ConfigurationValidating the Configuration Configuring the Catalyst 6500 SupervisorCreate the Vlan between the supervisor and Wlsm Configuring the WDS on the WlsmWlsmconfig#hostname hostname Wlsmconfig#snmp-server view iso iso includedConfiguring the Infrastructure Access Points Wlsmconfig# wlccp wnm ip address wlse ip addressInfra-apconfig#wlccp ap wds ip address wlsm ip address Validating the Setup Wlsm# show wlccp wds apWlsm# show wlccp wnm status Mobility ap Sup720# show mobility statusFast Secure Roaming with Cckm Infra-apconfig-if-ssid#authentication network-eap eap-group When Using Multiple Encryption Types or VLANsInfra-apconfig#interface dot11Radio Infra-apconfig-if#encryption mode ciphers cipher-typeClick Profile Management Configuring ACU to use CckmCisco Swan Framework Radio Management Cisco Swan Radio Management FeaturesBuilding Tool Pop-Up Window Preparing to Use Cisco Swan Radio ManagementCisco Swan Radio Management Features Page OL-6217-01